$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft File: LcO_WKfD4suVkd5E2HmTwNP3MnM.mft (raw, json) Hash identifier: N+KkuY0SQUTmwpGxs3+ZDAcGUxy0yGpUIOp5TwJzCQw= Subject key identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 Authority key identifier: 2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 Certificate issuer: /CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Certificate serial: 0713 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft Manifest number: 0713 Signing time: Sun 15 Jun 2025 07:22:29 +0000 Manifest this update: Sun 15 Jun 2025 07:22:28 +0000 Manifest next update: Sun 15 Jun 2025 13:22:28 +0000 Files and hashes: 1: LcO_WKfD4suVkd5E2HmTwNP3MnM.crl (hash: XslpZlX7ZUm3OhlbtnnONeayGD3hZA0zhwLYyWVOD7A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 09:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DC3BF58A7C3E2CB9591DE44D87993C0D3F73273 Validity Not Before: Jun 15 07:22:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=367407F667E8B7FA6AB4E416F485B012C3A31CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:b9:90:a7:b9:1c:e8:12:8a:e5:8c:fb:aa: 6e:31:ee:eb:e5:b8:70:28:bd:51:a0:e3:9f:2a:d0: 77:8d:76:61:8b:9f:17:31:84:33:50:66:8a:09:bf: fa:99:0d:10:db:88:7e:b5:43:0c:12:1f:a7:fb:49: 3d:3f:c9:c4:0b:d4:a8:68:3f:82:bb:59:5a:b0:47: 27:a5:35:11:a1:ce:9a:12:83:1c:5c:81:e7:e8:70: d0:7a:ce:72:da:f7:6a:54:19:7c:d8:3c:c6:d5:21: fd:9d:fe:7e:b1:2a:ff:b3:ba:e7:e4:9d:5a:64:98: cb:25:63:14:3f:58:b6:f1:bf:80:c0:17:5d:98:c6: 3d:4e:f5:83:4e:be:e0:a7:74:13:93:92:9d:8d:0f: 2c:a0:b1:cb:c9:3d:55:83:4b:93:28:17:68:0b:19: b6:73:45:2d:61:38:c0:0a:e2:20:7f:57:ab:66:b8: 30:62:e6:dc:bd:28:4e:19:81:fb:31:92:b4:d5:46: 3a:56:52:c7:8c:ee:55:1c:b9:53:22:5e:23:da:23: 43:d1:4e:d5:9b:42:ab:50:2a:dc:bc:bf:5e:9a:36: 47:dc:38:18:a2:52:e4:b8:9a:20:cf:aa:af:a2:05: 4d:01:7b:f0:9d:72:5b:ff:b4:8c:08:33:ed:ee:6b: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:07:F6:67:E8:B7:FA:6A:B4:E4:16:F4:85:B0:12:C3:A3:1C:C4 X509v3 Authority Key Identifier: keyid:2D:C3:BF:58:A7:C3:E2:CB:95:91:DE:44:D8:79:93:C0:D3:F7:32:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LcO_WKfD4suVkd5E2HmTwNP3MnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3292/LcO_WKfD4suVkd5E2HmTwNP3MnM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f9:24:24:63:bd:67:9b:92:a3:7b:cc:c2:0f:9f:12:90:54: 32:35:98:aa:96:5c:3f:57:3c:d2:eb:51:57:ce:c9:06:af:13: a9:19:4b:aa:59:b3:e9:12:05:a9:b9:a5:ca:dd:6d:21:29:fe: ec:36:ba:4f:9e:2e:a4:ef:0b:a7:36:70:8d:e1:bb:88:7b:ac: c2:61:4a:d1:d4:f2:26:d9:51:df:24:eb:2a:40:33:71:b8:e4: f3:c4:4d:aa:76:53:1c:69:b1:dc:2b:68:d1:91:b7:98:48:70: df:40:19:ec:32:c0:16:82:7e:b3:8c:f5:ea:44:6a:6b:1f:2a: 93:00:08:48:72:ad:ff:05:38:45:63:aa:79:f0:67:01:88:91: e0:9e:43:d2:7c:a1:c1:00:c6:91:fc:1e:d9:56:17:c0:e4:c7: e6:3c:ff:e3:4b:4f:f0:ba:f1:1c:35:ca:cc:37:e8:98:02:86: c6:ce:4f:6a:8b:a5:92:1f:9b:fb:13:b9:bc:33:6b:96:24:29: 94:3c:51:34:64:b6:d5:ec:05:48:7c:06:b3:e5:da:19:9b:4a: cc:91:d6:54:a6:e8:44:62:93:65:74:ae:08:13:c4:03:67:fc: ca:2d:3d:81:21:b5:2a:b6:0d:6d:34:c7:a0:e0:e5:17:ee:f3: 31:84:21:37 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRD M0JGNThBN0MzRTJDQjk1OTFERTQ0RDg3OTkzQzBEM0Y3MzI3MzAeFw0yNTA2MTUw NzIyMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM2NzQwN0Y2NjdFOEI3 RkE2QUI0RTQxNkY0ODVCMDEyQzNBMzFDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpQ7mQp7kc6BKK5Yz7qm4x7uvluHAovVGg458q0HeNdmGLnxcx hDNQZooJv/qZDRDbiH61QwwSH6f7ST0/ycQL1KhoP4K7WVqwRyelNRGhzpoSgxxc gefocNB6znLa92pUGXzYPMbVIf2d/n6xKv+zuufknVpkmMslYxQ/WLbxv4DAF12Y xj1O9YNOvuCndBOTkp2NDyygscvJPVWDS5MoF2gLGbZzRS1hOMAK4iB/V6tmuDBi 5ty9KE4ZgfsxkrTVRjpWUseM7lUcuVMiXiPaI0PRTtWbQqtQKty8v16aNkfcOBii UuS4miDPqq+iBU0Be/Cdclv/tIwIM+3uazaPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNnQH9mfot/pqtOQW9IWwEsOjHMQwHwYDVR0jBBgwFoAULcO/WKfD4suVkd5E 2HmTwNP3MnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Mi9MY09fV0tmRDRzdVZrZDVFMkhtVHdOUDNNbk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xjT19XS2ZENHN1VmtkNUUySG1Ud05QM01uTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTIvTGNPX1dLZkQ0c3VW a2Q1RTJIbVR3TlAzTW5NLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHH5JCRjvWebkqN7zMIPnxKQVDI1mKqWXD9XPNLrUVfOyQavE6kZS6pZs+kS Bam5pcrdbSEp/uw2uk+eLqTvC6c2cI3hu4h7rMJhStHU8ibZUd8k6ypAM3G45PPE Tap2UxxpsdwraNGRt5hIcN9AGewywBaCfrOM9epEamsfKpMACEhyrf8FOEVjqnnw ZwGIkeCeQ9J8ocEAxpH8HtlWF8Dkx+Y8/+NLT/C68Rw1ysw36JgChsbOT2qLpZIf m/sTubwza5YkKZQ8UTRkttXsBUh8BrPl2hmbSsyR1lSm6ERik2V0rggTxANn/Mot PYEhtSq2DW00x6Dg5Rfu8zGEITc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:25:11 2025 by rpki-client